--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T13:29:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: ovnkube operation: Update time: "2026-09-10T13:29:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T13:31:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-09-10T13:31:44Z" name: csr-nt8qm resourceVersion: "6644" uid: 0da2c9cf-e004-47f4-b97f-35325dca6f12 spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=412359f7e88a352abb5c37c020a65fc81b104c056030fd98fe9f0a0c3f8344d2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-139-172.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T13:31:44Z" lastUpdateTime: "2026-09-10T13:31:44Z" message: Auto-approved CSR "csr-nt8qm" reason: AutoApproved status: "True" type: Approved